Jobiba hiring network

Threat And Analytics Lead Jobs

1,891 active opportunities · Updated for October 2026

Fresh results

15 shown

Explore current threat and analytics lead jobs. Use filters to narrow by work mode, employment type, experience and date posted.

A
Asana
📍 San Francisco• $182K – $207K/yr
5 days ago

Asana’s Corporate Strategy team drives clarity and focus in Asana’s long-range growth strategy. As a member of this team, you will provide direct consulting support to our C-suite, handle high-priority work from our CEO, and apply a BizOps lens to build more rigor around how we run the business, including MBRs. You will also execute on work when other teams are at capacity and help fill critical gaps. This is a high-visibility role where you will partner with stakeholders across Product, Finance, GTM, and G&A teams to translate vision into executable growth bets. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve New Product Incubation (NPI) & Investment: Lead market analysis to support "big bets," shape M&A strategy, and develop rigorous investment evaluation frameworks to guide portfolio decisions. Commercial Strategy: Work with cross-functional teams to set our product portfolio up for success, including assessing and evaluating opportunities to refine our GTM motions. Long-Range Planning: Drive H2/H3 (Horizon 2 and Horizon 3) planning efforts, identifying long-term opportunities to ensure sustainable growth. Strategic Threat & Opportunity Analysis: Evaluate existential threats and market opportunities through robust scenario analyses to inform executive decision-making. Strategic Partnerships: Identify and evaluate strategic partnership opportunities that align with Asana’s long-term vision. Operating Model and Org Design: Work with leadership to architect the organizational design and internal operating models required to execute against our corporate priorities. Spec

aifinance
View job →

Senior Sales Engineer - Melbourne, Australia Rubrik's customers are dealing with one of the most complex threat environments in enterprise technology. The conversation has shifted from backup to cyber resilience: ransomware recovery, identity, data security posture, safe AI. They need a technical partner who understands both the technology and what's at stake. As a Senior Sales Engineer, you are that partner. You will be the primary technical voice for Rubrik's enterprise, public-sector and commercial customers throughout Melbourne, helping them understand their options, build confidence in a solution, and confirm that what we propose works in their environment. You'll work closely with our regional sales team, with the customer's success as the measure of a good outcome. About the position: Provides technical leadership and direction to customers and internal staff in the development of fully integrated technology solutions in support of pre-sales activities in the assigned market. Leads the analysis, design and development of target-state solutions spanning on-premises, hybrid and multi-cloud, mapping Rubrik into the customer's reference architecture, integration landscape and security posture, and whiteboards that target state live. Demonstrates technical leadership and subject matter expertise across enterprise data protection, cyber recovery, identity resilience, cloud-native and SaaS workload protection, and data security posture management. Works fluently across modern cloud environments. Translating an environment discovery into a solution that is both technically accurate and commercially sound. Acts as technical expert and consultant to develop and propose solutions that meet the technology and business requirements of assigned customers. Makes technical and sales presentations to customers' technical staff and senior management, and holds the room with executive audiences, reading the room and adjusting altitude as it changes. Scopes and runs proofs of co

awsazuregcp
View job →

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. The Logistics Security Intelligence Analyst supports Micron’s global logistics security program by producing timely, actionable intelligence on shipment risk, cargo theft trends, route exposure, carrier performance, alert activity, and logistics security incidents. This individual contributor role helps strengthen shipment visibility, support incident response, and enable data-driven decisions for valuable and sensitive shipments across Micron’s transportation network. Responsibilities: Collect, analyze, and report on logistics security data related to high-value and high-risk shipments, including shipment value, route risk, carrier performance, tracking status, alert activity, and incident history. Monitor internal, vendor, industry, open-source, and law-enforcement sources for cargo theft trends, route disruptions, regional security developments, and emerging threats. Prepare intelligence summaries, dashboards, route profiles, regional threat updates, incident trend reports, and briefing materials for logistics security leaders and multi-functional collaborators. Support lane, route, carrier, provider, and regional risk assessments by identifying risk indicators, documenting findings, and helping translate analysis into practical control recommendations. Analyze shipment monitoring alerts such as route deviation, unauthorized stop, signal loss, seal breach, geofence violation, cargo separation, and other logistics security events. Support blocking issue and incident response a

aisupply chainlogistics
View job →

Senior Sales Engineer - Brisbane, Australia Rubrik's customers in Queensland are dealing with one of the most complex threat environments in enterprise technology. The conversation has shifted from backup to cyber resilience: ransomware recovery, identity, data security posture, safe AI. They need a technical partner who understands both the technology and what's at stake. As a Senior Sales Engineer, you are that partner. You will be the primary technical voice for Rubrik's enterprise, public-sector and commercial customers throughout Queensland, helping them understand their options, build confidence in a solution, and confirm that what we propose works in their environment. You'll work closely with our regional sales team, with the customer's success as the measure of a good outcome. About the position: Provides technical leadership and direction to customers and internal staff in the development of fully integrated technology solutions in support of pre-sales activities in the assigned market. Leads the analysis, design and development of target-state solutions spanning on-premises, hybrid and multi-cloud, mapping Rubrik into the customer's reference architecture, integration landscape and security posture, and whiteboards that target state live. Demonstrates technical leadership and subject matter expertise across enterprise data protection, cyber recovery, identity resilience, cloud-native and SaaS workload protection, and data security posture management. Works fluently across modern cloud environments. Translating an environment discovery into a solution that is both technically accurate and commercially sound. Acts as technical expert and consultant to develop and propose solutions that meet the technology and business requirements of assigned customers. Makes technical and sales presentations to customers' technical staff and senior management, and holds the room with executive audiences, reading the room and adjusting altitude as it changes. Scopes an

awsazuregcp
View job →

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As a Regional Governance, Risk, Compliance (GRC) Principal, you will serve as the senior Governance, Risk, Compliance, and Cyber Resilience leader for Japan, acting as the primary liaison between Micron's global GRC organization and regional business operations. This role is responsible for driving adoption of enterprise governance, cybersecurity, risk management, compliance, audit, resilience, and regulatory programs across Japan while ensuring alignment with Micron's strategic objectives, regulatory obligations, customer requirements, and evolving threat landscape. You will partner closely with regional business leaders, site leadership, Engineering, IT, Product Security, Physical Security, Legal, Privacy, HR, Internal Audit, BISOs, external auditors, regulators, customers, and government stakeholders to assess risks, coordinate compliance activities, facilitate audits, manage remediation efforts, and strengthen organizational resilience. This role serves as the voice of Japan within the global GRC organization and ensures local regulatory requirements, cultural considerations, customer expectations, and business priorities are effectively represented in enterprise governance decisions. The Regional GRC Principal will also champion AI-enabled governance and risk management capabilities, helping scale assessments, evidence management, risk monitoring, regulatory analysis, and compliance oversight while improving efficiency and consistency across the region. POSITION QUALIFICATIONS <p

artificial intelligenceairecruitment
View job →
A
Anthropic
📍 Ca New York City• $320K – $405K/yr
4mo ago

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're seeking a Platform Hardware Security Engineer to design and implement security architectures for bare-metal infrastructure. You'll work with teams across Anthropic to build firmware, bootloaders, operating systems, and attestation systems to ensure the integrity of our infrastructure from the ground up. This role requires expertise in low-level systems security and the ability to architect solutions that balance security requirements with the performance demands of training AI models across our massive fleet. Key responsibilities Design and implement secure boot chains from firmware through OS initialization for diverse hardware platforms (CPUs, BMCs, switches, peripherals, and embedded microcontrollers) Architect attestation systems that provide cryptographic proof of system state from hardware root of trust through application layer Develop measured boot implementations and runtime integrity monitoring Create reference architectures and security requirements for bare-metal deployments Integrate security controls with infrastructure teams without impacting training performance Prototype and validate security mechanisms before production deployment Conduct firmware vulnerability assessments and penetration testing Build firmware analysis pipelines for continuous security monitoring Document security architectures and maintain threat models Collaborate with software and hardware vendors to ensure security capabilities meet our requirements Minimum qualifications Hands-on experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone) Strong understanding of cryptogr

aisupply chainlogistics
View job →

As a SOC Engineer / Detection Engineer, you will be responsible for detecting, investigating, and responding to security incidents across our environment, while continuously improving how we detect and handle threats. You will work hands-on with our SIEM and incident response processes, and act as a key point of contact between the SOC and other engineering/security teams. Depending on your profile, some of your responsibilities can include: - Incident Response: Lead and support the end-to-end response to security incidents, from detection through containment, eradication, and recovery. - Security Investigation: Conduct in-depth investigations into suspicious activity and alerts, correlating data across logs, endpoints, network, and cloud sources to determine root cause and impact. - Post-Mortems & RCAs: Drive post-incident reviews and root cause analyses (RCAs), documenting timelines, findings, and actionable follow-ups. - SIEM Engineering: Implement, tune, and maintain SIEM use cases, detection rules, correlation logic, and alerting to reduce false positives and close detection gaps. - SIEM Support: Provide ongoing support for the SIEM platform, including onboarding new log sources, troubleshooting data ingestion, and maintaining dashboards/reports. - Cross-Team Collaboration: Partner with Engineering, IT, and other Security teams to remediate findings, validate fixes, and share threat context. - Process Improvement: Identify gaps in detection, response, and documentation, and drive improvements to playbooks, runbooks, and SOC workflows. **Must have:** - Incident Response: Hands-on experience handling security incidents, including triage, containment, and coordination across teams. - Investigation Skills: Strong analytical ability to investigate alerts and logs (SIEM, EDR, network, cloud) and determine root cause.

pythonawslinux
View job →
D
Datadog
📍 New York• Full-time• From $192K/yr
4mo ago

As Engineering Manager for Threat Detection, you will lead a high-performing team that powers Datadog's detection program. Threat Detection is the organization responsible for keeping Datadog ahead of an evolving threat environment: closing coverage gaps faster, raising the bar on signal quality, and shipping detections that hold up under the scale and complexity of cloud-native infrastructure. Your team will combine direct detection expertise, platform engineering, and applied AI to ship detections at a pace and scale traditional rule-writing alone cannot match. Examples of what your team will work on include detection-authoring agents, the detection platform that powers every rule in production, coverage analysis, alert triage and response automation, and the evaluation infrastructure that holds these systems to a high bar of fidelity. Detection authorship is a shared responsibility across the organization, and your team will contribute both by building the systems that scale our authoring capacity and by writing detections directly when their domain expertise is the right tool. You will partner closely with our Security Incident & Response Team (SIRT), Cyber Threat Intelligence (CTI), AI Engineering teams, and Datadog's broader Security organization. This is a high-impact leadership role: you will grow a team of security and software engineers responsible for building and executing our detection and AI strategy. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog Security's shift to AI-accelerated detection and response. Drive development of high-fidelity detections as a shared responsibility across the organization, ensuring your team's systems and direct contributions raise the bar on coverage and

pythonci/cdrest
View job →
A
Asana
📍 Vancouver• C$200K – C$240K/yr
4mo ago

Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you'll achieve: Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain , ensuring timely and effective remediation of security incidents. Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments. Investigate and contain software supply chain and CI/CD incidents , from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI). Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms. Cond

javascripttypescriptpython
View job →

Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team in Warsaw. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve: Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain , ensuring timely and effective remediation of security incidents. Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments. Investigate and contain software supply chain and CI/CD incidents , from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI). Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.

javascripttypescriptpython
View job →
N
5 days ago

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in an inclusive, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is searching for a creative, highly motivated and independent engineer with expertise in system software with security background to join the SOC System Software organization. This position offers the opportunity to have real impact in a dynamic, technology-focused company impacting SOC based product lines ranging from autonomous vehicles, robotics, consumer graphics, and edge AI. What You’ll Be Doing: Lead all HDCP (High-bandwidth Digital Content Protection) activities across SoC-based projects, leading the feature roadmap, protocol implementation, compliance certification, and delivery across chips, platforms, and products. Develop and maintain secure-engine firmware on a RISC-V based secure processor. Deliver end to end HDCP solution across multiple software stacks spanning Linux, Android for automotive, and consumer platforms. Drive firmware production signing readiness, rollback-prevention strategies, and key-provisioning workflows. Serve as the security primary contact for the team, leading all aspects of threat modeling, static analysis, vulnerability tracking and remediation, and security compliance across all projects. Collaborate with multi-functional teams spanning HW design, boo

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. As a Staff DevSecOps Engineer in the ET team, you will be the technical authority and architectural owner responsible for embedding security, compliance, and automated release practices across our enterprise applications ecosystem—including Salesforce, NetSuite, Workday, Adobe Experience Manager (AEM), and modern web stacks (Vercel/Next.js) . In this role, you will bridge development, security, and enterprise ops. You will design, scale, and maintain automated security pipelines, unified observability, edge defense, and identity management across critical business systems. You will serve as a technical leader—driving secure-by-design architectures, threat modeling, and automated governance across complex enterprise platforms. Key Responsibilities: Enterprise DevSecOps Architecture & CI/CD Security Multi-Platform CI/CD Governance: Architect and scale enterprise-grade CI/CD and deployment frameworks across diverse systems (Salesforce via Gearset/Copado , AEM/Web via CircleCI/GitHub Actions , NetSuite, and Workday). Shift-Left Security Pipeline: Integrate automated SAST, DAST, Software Composition Analysis (SCA), and secrets detection into workflows using tools like SonarQube, Snyk, PMD, GitGuardian, and OWASP ZAP . Secrets & Supply Chain Management: Standardize secrets management (e.g., HashiCorp Vault ) and safeguard third-party dependencies, API integrations, and package deployments across all enterprise platforms. Edge, WAF & Network Security G

pythonreactaws
View job →
W
25 days ago

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: Detection Engineering is responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms. This role focuses on proactive threat detection, automation-first practices, and continuous improvement of detection coverage and accuracy, supporting the WPP SOC transformation into an Autonomic Security Operations model. What you'll be doing: Develop, test, and maintain detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms. Regularly review and enhance detection logic to improve accuracy, reduce noise, and align with evolving threats. Work with wider WPP engineering teams to ensure high-quality, normalized telemetry for effective detection. Automate detection rule deployment, QA, and version control using scripting and CI/CD pipelines. Root Cause Analysis (RCA) Conduct RCA on missed detections, delayed responses, and high-severity incidents. Identify technical and process-level causes of detection failures or inefficiencies. Drive corrective actions based on RCA outcomes (e.g., rule improvements,

pythonairecruitment
View job →

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Roles & Responsibilities Design, deploy, and manage AWS cloud infrastructure and Kubernetes (EKS) environments. Build, maintain, and optimize GitLab CI/CD pipelines for automated deployments. Implement DevSecOps best practices, including infrastructure security, vulnerability management, and compliance controls. Monitor, troubleshoot, and improve platform reliability, performance, and scalability. Deploy and manage cloud-native applications, databases, and supporting services. Collaborate with development teams on architecture, deployment strategies, and production readiness. Drive infrastructure automation using Infrastructure as Code (Terraform). Support incident management, root cause analysis, and operational excellence initiatives. Mandatory Requirements 5+ years of hands-on DevOps/DevSecOps experience in production environments. Strong expertise with AWS services including EKS, EC2, S3, CloudFront, WAF, Lambda, and VPC. Minimum 3+ years of Kubernetes experience, preferably Amazon EKS. Hands-on experience building and managing GitLab CI/CD pipelines. Strong Linux administration and troubleshooting

pythonsqlaws
View job →

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About The Role This is an exciting opportunity to join a lean but growing Strategic Finance & Business Operations team at a high-growth pre-IPO startup. You will play a critical role as an analytical thought partner to various leaders and teams across Verkada to drive business insights, decision-making rigor, and operational excellence, helping us reach the next level of scale and operating sophistication in the process. Depending on interest, we currently have roles open in both our Product and GTM pillars. In this role, you will: Be the primary business partner to several of our senior leaders Drive financial planning and budgeting as the accountable owner for key portions of our several hundred million dollar budget Define the management dashboard / key operating metrics that help us understand the health of our business, and generate deep

sqlaifinance
View job →
🔔

Get new threat and analytics lead jobs by email

Daily job updates · Unsubscribe anytime